Latest [Nov 10, 2023] Cisco 400-007 Real Exam Dumps PDF
400-007 Practice Test Questions Updated 270 Questions
NEW QUESTION # 137
Company XYZ uses an office model where the employees can use any open desk and plug their laptops in. They want to authenticate the end users using their domain username and password before allowing them access to the network. The design must also accommodate the ability of controlling traffic within the same group or subnet if a macro (or micro) segmentation-based model is adopted in the future. Which protocol can be recommended for this design to authenticate end users?
- A. EAP
- B. LDAP
- C. RADIUS
- D. TACACS+
Answer: C
Explanation:
https://www.networkstraining.com/what-is-cisco-ise/
NEW QUESTION # 138
Company XYZ is in the process of identifying which transport mechanism(s) to use as their WAN technology. Their main two requirements are.
* a technology that could offer DPI, SLA, secure tunnels, privacy, QoS, scalability, reliability, and ease of management
* a technology that is cost-effective
Which WAN technology(ies) should be included in the design of company XYZ?
- A. Both technologies should be used. Each should be used to back up the other one; where the primary links are MPLS, the internet should be used as a backup link with IPsec (and vice versa).
- B. Internet should be the preferred option because it is cost effective and supports BFD, IP SLA. and IPsec for secure transport over the public Internet.
- C. MPLS meets all these requirements and it is more reliable than using the Internet. It is widely used with defined best practices and an industry standard.
- D. Software-defined WAN should be the preferred choice because it complements both technologies, covers all the required features, and it is the most cost-effective solution.
Answer: D
NEW QUESTION # 139
A business invests in SDN and develops its own SDN controller that, due to budget constraints, runs on a single controller. The controller actively places an exclusive lock on the configuration of the devices to ensure it is the only source of changes to the environment. What is the result if the controller fails?
- A. If a device fails, the configuration backup is unavailable-
- B. All device configurations are in read-only mode until the controller is restored.
- C. The control plane is unavailable until the controller is restored.
- D. Manual changes are only possible until the controller is restored
Answer: C
NEW QUESTION # 140
SDN emerged as a technology trend that attracted many industries to move from traditional networks to SDN. Which challenge is solved by SDN for cloud service providers?
- A. complex and distributed management flow
- B. need for intelligent traffic monitoring
- C. higher operating expense and capital expenditure
- D. exponential growth of resource-intensive application
Answer: D
NEW QUESTION # 141
Drag and drop the FCAPS network management reference models from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION # 142
Refer to the exhibit.
This network is running legacy STP 802.1 d. Assuming "hello_timer" is fixed to 2 seconds, which parameters can be modified to speed up convergence times after single link/node failure?
- A. The transit_delay=5 and dpdu_delay=20 are recommended values, considering helto_timer=2 and specified
- B. Only the maximum_transmission_halt_delay and diameter parameters are configurable parameters in 802. to speed up STP convergence process
- C. Only the transit_delay and bpdu_delay timers are configurable parameters in 802.1d to speed up STP convergence process.
- D. The max_age and forward delay parameters can be adjusted to speed up STP convergence process.
Answer: D
NEW QUESTION # 143
What is a characteristic of a secure cloud architecture model?
- A. software-defined network segmentation
- B. limited access to job function
- C. multi-factor authentication
- D. dedicated and restricted workstations
Answer: A
NEW QUESTION # 144
Refer to the exhibit.
As part of a redesign project, you must predict multicast behavior What happens to the multicast traffic received on the shared tree (*,G), if it is received on the LHR interface indicated*?
- A. It is dropped due to an unsuccessful RPF check against the multicast source
- B. It is switched give that no RPF check is performed
- C. It is switched due to a successful RPF check against the routing table
- D. It is dropped due to an unsuccessful RPk8t8ck against the multicast receiver.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/support/docs/ip/ip-multicast/16450-mcastguide0.html When a multicast packet arrives on an interface, the RPF process checks to ensure that this incoming interface is the outgoing interface used by unicast routing in order to reach the source of the multicast packet. This RPF check process prevents loops. Multicast routing does not forward a packet unless the source of the packet passes a RPF check. Once a packet passes this RPF check, multicast routing forwards the packet based only upon the destination address.
NEW QUESTION # 145
Which two characteristics are associated with 802 1s? (Choose two)
- A. CPU and memory requirements are the highest of all spanning-tree STP implementations.
- B. 802.1s provides for faster convergence over 802 1D and PVST+.
- C. 802.1s maps multiple VLANs to the same spanning-tree instance
- D. 802.1s supports up to 1024 instances of 802.1
- E. 802.1 s is a Cisco enhancement to 802.1w.
Answer: B,C
NEW QUESTION # 146
A service provider recently migrated to an SD-WAN solution for delivering WAN connections to its customers. One of the main challenges with the SD-WAN deployment is that branch site volume increases every year, which causes management complexity. Which action resolves the issue?
- A. Set up a dedicated team to monitor and provision new customers
- B. Implement a scalable network management system to manage all sites.
- C. Build a service orchestration platform on top of the network controller
- D. Adopt a well-structured SD-WAN service management lifecycle model
Answer: C
NEW QUESTION # 147
You are designing an Out of Band Cisco Network Admission Control. Layer 3 Real-IP Gateway deployment for a customer Which VLAN must be trunked back to the Clean Access Server from the access switch?
- A. management VLAN
- B. user VLAN
- C. authentication VLAN
- D. untrusted VLAN
Answer: A
NEW QUESTION # 148
You have been tasked with designing a data center interconnect to provide business continuity You want to encrypt the traffic over the DCI using IEEE 802 1AE MACsec to prevent the deployment of any firewall or IPS. Which two interconnect technologies support MACsec? (Choose two.)
- A. DMVPN
- B. KVPLS
- C. EoMPLS
- D. MPLS Layer 3 VPN
- E. GET VPN
Answer: B,C
NEW QUESTION # 149
While reviewing an existing network design, you are discussing the characteristics of different STP versions. Which protocol minimizes unicast flooding during a Topology Change Notification in a Layer 2 switched network with many VLANs?
- A. PVRSTP
- B. PVSTP+
- C. STP
- D. MST
Answer: A
NEW QUESTION # 150
Which SDN architecture component is used by the application layer to communicate with the control plane layer to provide instructions about the resources required by applications?
- A. southbound APIs
- B. SDN controller
- C. orchestration layer
- D. northbound APIs
Answer: D
NEW QUESTION # 151
Refer to the exhibit.
An engineer is designing the network for a multihomed customer running in AS 111 does not have any other Ass connected to it. Which technology is more comprehensive to use in the design to make sure that the AS is not being used as a transit AS?
- A. Configure the AS-set attribute to allow only routes from AS 111 to be propagated to the neighbor ASs.
- B. include an AS path access list to send routes to the neighboring ASs that only have AS 111 in the AS path field.
- C. Include a prefix list to only receive routes from neighboring ASs.
- D. Use the local preference attribute to configure your AS as a non-transit'' AS.
Answer: B
NEW QUESTION # 152
Company XYZ network runs IPv4 and IPv6 and they want to Introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?
- A. PIM-SSM
- B. BIDIR-PIM
- C. PIM-DM
- D. PIM-SM
Answer: A
NEW QUESTION # 153
Which two points must network designers consider when designing a new network design or when evaluating an existing network design to help them understand the high-level design direction with regards to the security aspects? (Choose two)
- A. Consider organization's security policy standards
- B. Consider for only new network technologies and components
- C. Consider Business objectives and goals
- D. Consider for only multi-site networks
Answer: A,C
NEW QUESTION # 154
What are two descriptions of network optimization? (Choose two.)
- A. maintain high availability
- B. identify network requirements
- C. network health maintenance
- D. proactive network management
- E. network redesign
Answer: A,C
NEW QUESTION # 155
Refer to the exhibit.
There are multiple trees in the Cisco FabricPath All switches in the Layer 2 fabric share the same view of each tree. Which two concepts describe how the multicast traffic is load-balanced across this topology? (Choose two )
- A. A specific (S.G) multicast traffic is load-balanced across all trees due to better link utilization efficiency.
- B. All trees are utilized at the same level of the traffic rate
- C. A specific (S.G) traffic is not load-balanced
- D. Every leaf node assigns the specific (S.G) to the same tree.
- E. The multicast traffic is generally load-balanced across all trees
Answer: A,B
NEW QUESTION # 156
Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)
- A. VSANs must be routed between sites to isolate fault domains and increase overall availability.
- B. Synchronous data replication must be used to meet the business requirements
- C. VSANs must be extended from the primary to the secondary site to improve performance and availability.
- D. Target RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites.
- E. Asynchronous data replication should be used in this scenario to avoid performance impact in the primary site.
Answer: B,E
Explanation:
synchronous data replication must be used to meet the business requirements, is incorrect. As described above, asynchronous replication would be a better choice in this scenario due to the distance between the data center sites and the target RPO/RTO requirements.
asynchronous data replication should be used in this scenario to avoid performance impact in the primary site, is correct. Asynchronous replication would allow Company XYZ to meet the target RPO/RTO requirements while avoiding the performance impact of synchronous replication.
NEW QUESTION # 157
The network designer needs to use GLOP IP addresses in order to make them unique within their ASN Which multicast address range should be used?
- A. 239000 to 239255255.255
- B. H233.0.0 0 to 233.255.255 255
- C. 232.0.0.0 to 232 255.255.255
- D. 224000 to 2240.0 255
Answer: B
NEW QUESTION # 158
In an OSPF network with routers connected together with Ethernet cabling, which topology typically takes the longest to converge?
- A. triangulated
- B. partial mesh
- C. full mesh
- D. ring
- E. squared
Answer: C
NEW QUESTION # 159
Refer to the diagram.
Which solution must be used to send traffic from the foreign wireless LAN controller to the anchor wireless LAN controller?
- A. Send packets from the foreign controller to the anchor controller via IPinIP or IPsec tunnel.
- B. Encapsulate packets into an EoIP tunnel and send them to the anchor controller.
- C. Send packets from the foreign controller to the anchor controller via Layer 3 MPLS VPN or VRF-Lite
- D. Send packets without encapsulation to the anchor controller over the routed network.
Answer: B
NEW QUESTION # 160
......
Cisco 400-007 Dumps - Secret To Pass in First Attempt: https://www.exams-boost.com/400-007-valid-materials.html
400-007 Dumps - Grab Out For [NEW-2023] Cisco Exam: https://drive.google.com/open?id=1K6GSZYS5KxHzwB6bxwfDwHOmLWEu4x23